|
|
382e48176d
|
refactor(cis): extract hardcoded values to cis_defaults and add _normalize.yml
|
2026-02-21 01:26:31 +01:00 |
|
|
|
6e0c289226
|
refactor(cis): remove redundant AllowUsers/AllowGroups/DenyUsers/DenyGroups from sshd
|
2026-02-21 00:38:52 +01:00 |
|
|
|
aec82e4241
|
refactor: add loop_control labels to dict-based loops across all roles
|
2026-02-20 23:00:53 +01:00 |
|
|
|
e0687269d4
|
fix(cis): add pipefail to sshd version detection and define binary defaults
|
2026-02-20 22:24:14 +01:00 |
|
|
|
5769bd456d
|
fix(cis): make mlkem768x25519-sha256 KexAlgorithm conditional on OpenSSH 9.9+
|
2026-02-20 21:50:58 +01:00 |
|
|
|
1fc64b9e5d
|
fix(cis): remove deprecated sshd options and update hardening values
|
2026-02-20 20:17:52 +01:00 |
|
|
|
fc05708466
|
refactor(vars): add system/hypervisor dict inputs
|
2026-02-11 05:37:18 +01:00 |
|
|
|
3f0408e271
|
CIS role split and permission safety
|
2025-12-27 22:27:26 +01:00 |
|
